
CVE-2023-52339
https://notcve.org/view.php?id=CVE-2023-52339
12 Jan 2024 — In libebml before 1.4.5, an integer overflow in MemIOCallback.cpp can occur when reading or writing. • https://github.com/Matroska-Org/libebml/blob/v1.x/NEWS.md • CWE-190: Integer Overflow or Wraparound •

CVE-2023-28185
https://notcve.org/view.php?id=CVE-2023-28185
10 Jan 2024 — An integer overflow was addressed through improved input validation. • https://support.apple.com/en-us/HT213673 • CWE-190: Integer Overflow or Wraparound •

CVE-2023-41056 – Redis vulnerable to integer overflow in certain payloads
https://notcve.org/view.php?id=CVE-2023-41056
10 Jan 2024 — Redis incorrectly handles resizing of memory buffers which can result in integer overflow that leads to heap overflow and potential remote code execution. • https://github.com/redis/redis/releases/tag/7.0.15 • CWE-190: Integer Overflow or Wraparound CWE-762: Mismatched Memory Management Routines •

CVE-2024-21310 – Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2024-21310
09 Jan 2024 — The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21310 • CWE-197: Numeric Truncation Error •

CVE-2024-21309 – Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2024-21309
09 Jan 2024 — Windows Kernel-Mode Driver Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios del controlador en modo kernel de Windows • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21309 • CWE-191: Integer Underflow (Wrap or Wraparound) •

CVE-2024-20698 – Windows Kernel Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2024-20698
09 Jan 2024 — Windows Kernel Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios del kernel de Windows • https://github.com/RomanRybachek/CVE-2024-20698 • CWE-190: Integer Overflow or Wraparound •

CVE-2024-20697 – Windows libarchive Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2024-20697
09 Jan 2024 — The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before writing to memory. • http://www.openwall.com/lists/oss-security/2024/06/04/2 • CWE-122: Heap-based Buffer Overflow •

CVE-2024-20654 – Microsoft ODBC Driver Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2024-20654
09 Jan 2024 — Microsoft ODBC Driver Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código del controlador ODBC de Microsoft • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20654 • CWE-190: Integer Overflow or Wraparound •

CVE-2022-36765 – Integer Overflow in CreateHob
https://notcve.org/view.php?id=CVE-2022-36765
09 Jan 2024 — EDK2 is susceptible to a vulnerability in the CreateHob() function, allowing a user to trigger a integer overflow to buffer overflow via a local network. ... An attacker, leveraging a local network, can initiate an integer overflow leading to a buffer overflow. • https://github.com/tianocore/edk2/security/advisories/GHSA-ch4w-v7m3-g8wx • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-680: Integer Overflow to Buffer Overflow •

CVE-2022-36764 – Heap Buffer Overflow in Tcg2MeasurePeImage
https://notcve.org/view.php?id=CVE-2022-36764
09 Jan 2024 — Successful exploitation requires a local attacker to trigger an integer overflow in the calculation of the EventSize variable at DxeTpm2MeasureBootLib.c, leading to the heap-buffer overflow, presenting a moderate risk to confidentiality and integrity. • https://github.com/tianocore/edk2/security/advisories/GHSA-4hcq-p8q8-hj8j • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-122: Heap-based Buffer Overflow CWE-680: Integer Overflow to Buffer Overflow •